Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

IIS service starts and stops randomly

Unity 3.1.5, OS SP2, Exchange off-box.

For whatever reason, I'll go to access the SA pages on Unity, only to have it timeout and give me a "page cannot be displayed" message. It says at the bottom "Web site found, waiting for reply..." but it will eventually timeout.

This always coincides with the IIS service stopping and starting at random. The last error message that shows up in the event log is usually "IIS start command received from NT AUTHORITY." But, the SA pages always timeout after that.

I go to restart the IIS service, and it appears to restart, but all web sites say "Stopped." I try to manually Start the sites, and I get an error that says "Address already in use."

I know it isn't a problem with too many SA logins - I'm hardly ever in the box to make any changes whatsoever, and I'm the only one that has SA access. Here are all of the errors I get in the system event log; it repeats this cycle every couple of days, and I always end up having to restart the box to get into the SA pages:

Event Type: Error

Event Source: Service Control Manager

Event Category: None

Event ID: 7031

Date: 5/2/2003

Time: 11:36:56 PM

User: N/A

Computer: UNITY

Description:

The IIS Admin Service service terminated unexpectedly. It has done this 23 time(s). The following corrective action will be taken in 1 milliseconds: Run the configured recovery program.

Event Type: Information

Event Source: IISCTLS

Event Category: None

Event ID: 2

Date: 5/2/2003

Time: 11:36:57 PM

User: N/A

Computer: UNITY

Description:

IIS stop command received from user NT AUTHORITY\SYSTEM. The logged data is the status code.

For additional information specific to this message please visit the Microsoft Online Support site located at: http://www.microsoft.com/contentredirect.asp.

Data:

0000: 00 00 00 00 ....

Event Type: Information

Event Source: IISCTLS

Event Category: None

Event ID: 1

Date: 5/2/2003

Time: 11:37:06 PM

User: N/A

Computer: UNITY

Description:

IIS start command received from user NT AUTHORITY\SYSTEM. The logged data is the status code.

For additional information specific to this message please visit the Microsoft Online Support site located at: http://www.microsoft.com/contentredirect.asp.

Data:

0000: 00 00 00 00 ....

Event Type: Error

Event Source: Service Control Manager

Event Category: None

Event ID: 7031

Date: 5/4/2003

Time: 3:49:32 AM

User: N/A

Computer: UNITY

Description:

The IIS Admin Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 1 milliseconds: Run the configured recovery program.

Any ideas/suggestions/help would be greatly appreciated.

Thanks,

TMH

4 REPLIES
Gold

Re: IIS service starts and stops randomly

It sounds to me like you could be infected with Code Red. Here are some Microsoft kb articles that might help:

http://support.microsoft.com/default.aspx?scid=kb;en-us;311517

http://support.microsoft.com/default.aspx?scid=kb;en-us;316612

Also, you can use this tool to scan for Code Red:

http://www.eeye.com/html/Research/Tools/codered.html

Hope these help,

Keith

New Member

Re: IIS service starts and stops randomly

Yes, they helped very much, thank you! I got the scanner, and sure enough, Unity is infected.

Now, my next questions is - should I install the OS SP3 from Cisco or just get the Microsoft patch for CodeRed? I'm leaning towards the patch - our Unity box got nailed with the slammer worm, and I remember deciding against putting SP3 and just putting the patches on because I couldn't find anything about SP3 working well with 3.1.5...

TMH

Gold

Re: IIS service starts and stops randomly

I would install Windows 2000 SP3 (from Microsoft) and all of the latest patches. If this machine has outbound internet access you can use Windows Update. There was an issue with TSP 6.0(1) and Windows 2000 SP3. If you are going to upgrade to Windows 2000 SP3 you should get the latest TSP (7.0(2)) as well.

http://www.cisco.com/cgi-bin/tablebuild.pl/unity-cm-tsp

Thanks,

Keith

New Member

Re: IIS service starts and stops randomly

Great - thanks so much. I will definitely upgrade the TSP to 7.0 before I put on SP3 for W2K...

One more questions - does Exchange also have to be running W2K SP3 (do the two boxes have to be at the same service pack level)?

TMH

430
Views
0
Helpful
4
Replies